security-checklist

Audit web applications against a pre-deployment security checklist.

359|61|Updated Dec 25, 2025

Search Tags:#checklist #security #authentication #pre-deployment #secrets-management #web-app

Ready to run

npx skills add https://github.com/jamditis/claude-skills-journalism --skill security-checklist-jamditis

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-checklist
Source: https://github.com/jamditis/claude-skills-journalism/tree/main/security-checklist
Command: npx skills add https://github.com/jamditis/claude-skills-journalism --skill security-checklist-jamditis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a pre-deployment security audit checklist to ensure web applications meet baseline security requirements before shipping, reducing risk from common misconfigurations.

Core Features & Use Cases

Authentication hygiene: checks for secure password storage, login protection, and session handling.
Input validation and data handling: ensures server-side validation, safe outputs, and proper data handling.
Secrets and configurations: verifies secrets are not stored in code or logs and that environment variables are used.
Network and data protection: confirms HTTPS, TLS, and access controls, with backups and auditing.
Compliance and auditing: aligns with common security expectations and enables remediation tracking.

Quick Start

Run the security checklist on a new or existing web application to identify and remediate baseline weaknesses before deployment.

Frequently Asked Questions about security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is a pre-deployment security checklist for web applications?▼

A pre-deployment security checklist verifies baseline requirements for web applications before shipping, ensuring authentication, input validation, secrets management, and network controls are addressed to reduce risk from common misconfigurations.

How do I audit my web app for secrets management and authentication hygiene before production?▼

Audit secrets management and authentication hygiene by checking that passwords are securely stored, sessions are protected, secrets are excluded from code and logs, and environment variables are used for configuration.

Does this pre-deployment security audit cover input validation and database security?▼

This pre-deployment audit covers input validation and database security by confirming server-side validation, safe outputs, proper data handling, and baseline database protection controls are in place before deployment.

Can I use this security checklist for code reviews and deployment pipelines?▼

You can use this security checklist during code reviews, deployment pipelines, and security reviews to identify baseline weaknesses and track remediation when preparing a web application for production.

What's the best way to verify HTTPS, TLS, and network access controls before shipping?▼

Verify HTTPS, TLS, and access controls by confirming network data protection measures are active, ensuring encrypted connections and proper access restrictions are configured before the deployment goes live.

When do I need a compliance and auditing baseline check for my web application?▼

A compliance and auditing baseline check is needed when responding to vulnerability concerns or preparing for production, aligning common security expectations and enabling remediation tracking for the web application.